The advanced Glupteba botnet has come under a spotlight after an announcement from Google earlier this week. Glupteba is a modular malware that utilizes blockchain technology and has well-developed features that include cryptocurrency mining, stealing user credentials and cookies, as well as a proxy service which they sell to other cybercriminals. Google launched an attack against the botnet, taking down command and control infrastructure to attempt to disrupt its operations. The operators attempted to regain control using a blockchain-based backup mechanism, though it is not known if it was successful. The infrastructure included 63 million Google Docs, 1,183 Google Accounts, 908 Google Cloud Projects, 870 Google Ad accounts, and, with the help of CloudFlare and others, multiple servers. Following the disruption, Google filed a temporary restraining order and a complaint against 17 suspected Glupteba operators. CTAPT analysts are monitoring the status of the Glupteba botnet as well as the case against the operators.